From d2c03841f129f0263f2407b8e00231fc8b02028e Mon Sep 17 00:00:00 2001 From: Val Redchenko Date: Wed, 4 Feb 2026 10:48:35 +0000 Subject: [PATCH] feat: add OSV Scanner workflow for vulnerability scanning Runs on PR, push to main, daily at 03:00 UTC, and manual dispatch. --- .github/workflows/osv-scanner.yml | 26 ++++++++++++++++++++++++++ 1 file changed, 26 insertions(+) create mode 100644 .github/workflows/osv-scanner.yml diff --git a/.github/workflows/osv-scanner.yml b/.github/workflows/osv-scanner.yml new file mode 100644 index 0000000..081e7a1 --- /dev/null +++ b/.github/workflows/osv-scanner.yml @@ -0,0 +1,26 @@ +name: OSV Scanner + +on: + pull_request: + branches: [main] + merge_group: + branches: [main] + push: + branches: [main] + schedule: + - cron: '0 3 * * *' # Daily at 03:00 UTC + workflow_dispatch: + +permissions: + actions: read + contents: read + security-events: write + +jobs: + scan-pr: + if: github.event_name == 'pull_request' || github.event_name == 'merge_group' + uses: google/osv-scanner-action/.github/workflows/osv-scanner-reusable-pr.yml@v2.3.2 + + scan-scheduled: + if: github.event_name == 'schedule' || github.event_name == 'push' || github.event_name == 'workflow_dispatch' + uses: google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml@v2.3.2